Understanding VLANs on Cloud Router Switch CRS125-24G-1S-RM

Hello,

I have been testing my setup after viewing the VLAN CRS example:
http://wiki.mikrotik.com/wiki/Manual:CRS_examples and this link
http://www.forummikrotik.com/beginner-basics/25704-[share]-crs125-vlan-trunking-configuration.html

I have 6 vlans, see attached config below for more details
VLAN are Trunk on SFP port to the router.
Router has ip of 192.168.8.1
Diagram to see connections and VLANS
https://drive.google.com/file/d/0B8qaHFlpCgWWNy1jczlaUkFnWlE/view?usp=sharing

Here is where I have trouble, I put my laptop on VLAN 10, set it with a static IP (192.168.10.5) gateway 192.168.10.1.
DNS Domain controller, plus google 8.8.8.8.

I am unable to ping the router at 192.168.8.1. I maybe missing something however, I cannot determine what it is.
Can any one help?

# dec/26/2014 05:55:07 by RouterOS 6.19
# software id = 5QG3-X71Z
#
/interface ethernet
set [ find default-name=sfp1 ] name=SFP1-router
set [ find default-name=ether1 ] master-port=SFP1-router
set [ find default-name=ether2 ] master-port=SFP1-router
set [ find default-name=ether3 ] master-port=SFP1-router
set [ find default-name=ether4 ] master-port=SFP1-router
set [ find default-name=ether5 ] master-port=SFP1-router
set [ find default-name=ether6 ] master-port=SFP1-router
set [ find default-name=ether7 ] master-port=SFP1-router
set [ find default-name=ether8 ] master-port=SFP1-router
set [ find default-name=ether9 ] master-port=SFP1-router
set [ find default-name=ether10 ] master-port=SFP1-router
set [ find default-name=ether11 ] master-port=SFP1-router
set [ find default-name=ether12 ] master-port=SFP1-router
set [ find default-name=ether13 ] master-port=SFP1-router
set [ find default-name=ether14 ] master-port=SFP1-router
set [ find default-name=ether15 ] master-port=SFP1-router
set [ find default-name=ether16 ] master-port=SFP1-router
set [ find default-name=ether17 ] master-port=SFP1-router
set [ find default-name=ether18 ] master-port=SFP1-router
set [ find default-name=ether19 ] master-port=SFP1-router
set [ find default-name=ether20 ] master-port=SFP1-router
set [ find default-name=ether21 ] master-port=SFP1-router
set [ find default-name=ether23 ] master-port=SFP1-router
set [ find default-name=ether24 ] master-port=SFP1-router
/port
set 0 name=serial0
/interface ethernet switch egress-vlan-tag
add tagged-ports=SFP1-router vlan-id=1
add tagged-ports=SFP1-router vlan-id=10
add tagged-ports=SFP1-router vlan-id=20
add tagged-ports=SFP1-router vlan-id=30
add tagged-ports=SFP1-router vlan-id=50
add tagged-ports=SFP1-router vlan-id=60
add tagged-ports=SFP1-router vlan-id=70
/interface ethernet switch ingress-vlan-translation
add customer-vlan-format=untagged-or-tagged new-customer-vid=10 ports=ether1,ether2 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=20 ports=ether3,ether4 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=30 ports=ether5,ether6 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=50 ports=ether7,ether8 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=60 ports=ether9,ether10 sa-learning=yes service-vlan-format=untagged-or-tagged
add customer-vlan-format=untagged-or-tagged new-customer-vid=70 ports=ether11,ether12 sa-learning=yes service-vlan-format=untagged-or-

tagged
/interface ethernet switch vlan
add ports=SFP1-router vlan-id=1
add ports=ether1,ether2,SFP1-router vlan-id=10
add ports=ether3,ether4,SFP1-router vlan-id=20
add ports=ether5,ether6,SFP1-router vlan-id=30
add ports=ether7,ether8,SFP1-router vlan-id=50
add ports=ether9,ether10,SFP1-router vlan-id=60
add ports=ether11,ether12,SFP1-router vlan-id=70
/ip address
add address=192.168.8.2/24 interface=SFP1-router network=192.168.8.0
/ip route
add distance=1 gateway=192.168.8.1
/ip upnp
set allow-disable-external-interface=no
/lcd
set color-scheme=light
/system clock

I think you should add VLAN 0 in “/interface ethernet switch vlan” for sfp1 and switch1-cpu port to allow untagged traffic from CRS to the router.